[arch-general] Vim configuration: custom runtimepath + ftdetect

[Jakub Klinkovský]

I have moved ~/.vim to ~/.config/vim, the configuration is as follows:

in ~/.profile:
  export VIMINIT='let $MYVIMRC="$XDG_CONFIG_HOME/vim/vimrc" | source $MYVIMRC'

in ~/.config/vim/vimrc:
  set viminfo+=n$XDG_CACHE_HOME/vim/viminfo
  set 
runtimepath=$XDG_CONFIG_HOME/vim,$XDG_CONFIG_HOME/vim/after,$VIM,$VIMRUNTIME

Now, the thing is that files from ~/.config/vim/ftdetect/ are not respected. On
the other hand, if I create ~/.vim/ftdetect/ (leaving the vimrc and everything
else under ~/.config), the files are correctly sourced.

Is this a bug or am I missing something here? According to ':help ftdetect' the
runtimepath should be respected.

For completeness: I have vim-hg-7.4.179 installed, the PKGBUILD is here:
https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Build/vim-hg/PKGBUILD

Thanks,

--
jlk


pgpB6WsIMu2N3.pgp
Description: PGP signature

Re: [arch-general] Vim configuration: custom runtimepath + ftdetect

[Jakub Klinkovský]

On 14.02.14 at 14:36, Emil Lundberg wrote:
> On Fri, Feb 14, 2014 at 3:21 AM, Jakub Klinkovský  wrote:
> > I have moved ~/.vim to ~/.config/vim, the configuration is as follows:
> >
> > in ~/.profile:
> >   export VIMINIT='let $MYVIMRC="$XDG_CONFIG_HOME/vim/vimrc" | source 
> > $MYVIMRC'
> >
> > in ~/.config/vim/vimrc:
> >   set viminfo+=n$XDG_CACHE_HOME/vim/viminfo
> >   set 
> > runtimepath=$XDG_CONFIG_HOME/vim,$XDG_CONFIG_HOME/vim/after,$VIM,$VIMRUNTIME
> >
> > Now, the thing is that files from ~/.config/vim/ftdetect/ are not 
> > respected. On
> > the other hand, if I create ~/.vim/ftdetect/ (leaving the vimrc and 
> > everything
> > else under ~/.config), the files are correctly sourced.
> >
> > Is this a bug or am I missing something here? According to ':help ftdetect' 
> > the
> > runtimepath should be respected.
> >
> > For completeness: I have vim-hg-7.4.179 installed, the PKGBUILD is here:
> > https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Build/vim-hg/PKGBUILD
> >
> > Thanks,
> >
> > --
> > jlk
> 
> I moved my vim config in exactly the same way a few days ago, but I
> use symlinks instead of configuration options.
> 
> $ ln -s ~/.config/vim/vimrc ~/.vimrc
> $ ln -s ~/.config/vim ~/.vim
> 
> Works just fine for me.
> 
> /Emil

Sure the symlinks work - but that will not help on the quest of cleaning my
$HOME folder and totally kills the reason for moving into ~/.config/

--
jlk


pgp38KmghwVTo.pgp
Description: PGP signature

Re: [arch-general] Bridge interface with netctl

[Jakub Klinkovský]

On 25.02.14 at 16:33, arnaud gaboury wrote:
> On Tue, Feb 25, 2014 at 1:43 PM, arnaud gaboury
>  wrote:
> >>
> >> Now, I want to start the bridge:
> >> # netctl start bridge-hortensia
> >> % ping -c 3 8.8.8.8
> >> connect: Network is unreachable
> 
> I realized that starting the bridge profile empty the /etc/resolv.conf.
> 
> Even if I modified the bridge profile, following the man page:
> 
> Description="Example Bridge connection"
> Interface=br0
> Connection=bridge
> BindsToInterfaces=(enp7s0)
> IP=no
> #Adress=('192.168.1.94/24')
> #Gateway='192.168.1.254'
> #DNS=('212.147.10.180' '212.147.10.162')
> DNSDomain=lan
> DNSSearch=('192.168.1.254') <<< these two last lines are supposed to
> pass these settings to /etc/resolv.conf
> 
> but nada :-(

DNS is just a cherry on the cake, first you need to establish the network
connection.

I'm not using netctl for some time, but I'm pretty sure it does not launch any
DHCP server. If you want to use DHCP, you will need to start the server on your
own.

I have written several scripts [1-4] to manage a bridge interface for QEMU VMs,
see if you can reuse some of it. Especially [2] might be useful for you, though
you probably do not need to create the tap interface. Note that the original
author of [3] and [4] is Xyne, see his excellent tutorial [5].

[1]: 
https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/qemu-launcher.sh
[2]: 
https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/qemu-tap-helper.sh
[3]: 
https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/nat-launch.sh
[4]: 
https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/nat-launch-subnet.sh
[5]: http://xyne.archlinux.ca/notes/network/dhcp_with_dns.html

Regards,

--
jlk


pgpIS8XafY9NL.pgp
Description: PGP signature

Re: [arch-general] Xorg doesn't start

[Jakub Klinkovský]

On 01.03.14 at 10:35, arno wrote:
> Hi,
> 
> I am install archlinux on my laptop, and I can't get my graphical card to 
> work (Xorg doesn't start).
> 
> My card is an ati hd 6750
> 
> I've installed xf86-video-ati, xorg-xserver and xorg-xinit.
> But when I try to run startx, xorg doesn't start, and I get a fatal error: no 
> screens found. Here is the full Xorg log:
> http://renevier.net/tmp/Xorg.0.log.txt
> 
> I tried to use catalyst as described on the wiki, but when trying to run 
> aticonfig, I get the following error:
> no supported adapters detected
> 
> lspci -v gives me:
> 
> 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] 
> Whistler [Radeon HD 6630M/6650M/6750M/7670M/7690M] (rev ff) (prog-if ff)
>   !!! Unknown header type 7f
>   Kernel driver in use: radeon
>   Kernel modules: radeon, fglrx
> 
> I also need to mention that when I boot from the install cd, then mount my 
> archlinux system and chroot into it, lspci -v gives me:
> 
> 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] 
> Whistler [Radeon HD 6630M/6650M/6750M/7670M/7690M] (prog-if 00 [VGA 
> controller])
>   Subsystem: Samsung Electronics Co Ltd Radeon HD 6750M
>   Flags: bus master, fast devsel, latency 0, IRQ 51
>   Memory at a000 (64-bit, prefetchable) [size=256M]
>   Memory at c070 (64-bit, non-prefetchable) [size=128K]
>   I/O ports at 3000 [size=256]
>   Expansion ROM at c072 [disabled] [size=128K]
>   Capabilities: [50] Power Management version 3
>   Capabilities: [58] Express Legacy Endpoint, MSI 00
>   Capabilities: [a0] MSI: Enable+ Count=1/1 Maskable- 64bit+
>   Capabilities: [100] Vendor Specific Information: ID=0001 Rev=1 Len=010 
> 
>   Capabilities: [150] Advanced Error Reporting
>   Kernel driver in use: radeon
> 
> So this brings me to my first subquestion: why does lspci work fine when 
> booting from the install/repair CD, but displays "Unknown header type" when 
> booting from my installed system?
> 
> And my main question is of course: what could I do to get my card working, 
> and X starting?
> 
> thanks a lot.

ArchWiki says [1]:
  Catalyst does not support Xorg Server 1.15, check out #Xorg repositories and
  pick up xorg repository that you would like to use.

According to the Xorg log, your version is 1.15. Try the open source driver
xf86-video-ati instead of the proprietary Catalyst; see [2] for details. You
will have to uninstall Catalyst first. [3]
  
[1]: https://wiki.archlinux.org/index.php/AMD_Catalyst
[2]: https://wiki.archlinux.org/index.php/ATI
[3]: https://wiki.archlinux.org/index.php/AMD_Catalyst#Uninstallation

--
jlk


pgpn_gkAjuqpr.pgp
Description: PGP signature

Re: [arch-general] Xorg doesn't start

[Jakub Klinkovský]

On 01.03.14 at 11:17, arno wrote:
> Hi, thanks for your reply
> 
> > ArchWiki says [1]:
> >   Catalyst does not support Xorg Server 1.15, check out #Xorg repositories 
> > and
> >   pick up xorg repository that you would like to use.
> 
> Apparently, the new catalyst (14.1) works fine with Xorg 1.15
> But anyway:
> 
> On Sat, Mar 01, 2014 at 08:11:07PM +0100, Jakub Klinkovský wrote:
> > On 01.03.14 at 10:35, arno wrote:
> > > 
> > > I've installed xf86-video-ati, xorg-xserver and xorg-xinit.
> > > But when I try to run startx, xorg doesn't start, and I get a fatal 
> > > error: no screens found. Here is the full Xorg log:
> > > http://renevier.net/tmp/Xorg.0.log.txt
> 
> I *tried* first to use the xf86-video-ati, and it didn't work. I only
> tried afterwards to use catalyst.
> 
> Neither catalyst nor xf86-video-ati work.

I've also noticed in the log that you also have an Intel card. Linux 3.12
introduced some changes to automatic GPU switching and power management [1],
maybe this is the problem. Which kernel do you have installed and which kernel
is on the live system where 'lspci' works?

[1]: 
http://kernelnewbies.org/LinuxChanges#head-f95c198f6fdc7defe36f470dc8369cf0e16898df

--
jlk


pgpQdM_BcvsfU.pgp
Description: PGP signature

Re: [arch-general] systemd-nspawn/systemd-networkd/

[Jakub Klinkovský]

On 07.03.14 at 12:28, arnaud gaboury wrote:
> >
> > I've had a quick look at systemd-networkd, and I don't think it would be
> > significantly different to set up than netctl in your case. I think the 
> > problem
> > was one of theory: I don't know how much reading you've done, but you need
> > to understand some theory of the networking stack, network interfaces,
> > bridges etc... before you can make a sensible configuration. I think that's
> > beyond the scope of the documentation for most of these tools, although it
> > would certainly make sense for the wiki to document some common use-cases.
> >
> > Paul
> 
> I read a lot, especially when it comes to networking. As for me, it is
> the trickiest part of administrating my machine. I found many posts
> asking help about bridge, and I realized I was far from being the only
> one to have trouble with this notion. The more detailed WIKI I found
> about a correct bridge set up was on parabolagnulinux qemu wiki[1].
> Usually Arch and parabola wiki are quite similar, but this time I
> found more info.
> I know systemd-networkd can be used for my container. For now, I am
> enjoying the container with netctl. I was not successful with
> networkd, as I do not fully understand the principle. I don't even
> know which profile for wich machine (host or container) !
> I have a lot of work to do now on container, as it will be a test
> server for writing/deploying web apps.
> TY for your kindness and support.
> 
> [1]https://wiki.parabolagnulinux.org/QEMU_Guide

I can't see any fundamental difference between [2] and [3], though admittedly
the Parabola wiki is more verbose and the topic is integrated into single
bloated article, whereas Arch wiki has the information split across multiple
pages - this is actually considered to be a good thing; plus every Archer should
be used to this. (But of course nothing is perfect, any improvements are
certainly welcome.)

As has been said, you should look into networking more generally - for example,
QEMU page on Arch wiki [4] describes several scenarios usable with
VMs/containers, though you probably don't want to use the QEMU-specific stuff.
If you want something more, look into the kernel docs [5].

[2]: 
https://wiki.parabolagnulinux.org/QEMU_Guide#Using_virtual_machines_for_use_servers_from_OS_guests_.28bridge-mode_networking_using_qemu-bridge-helper.29
[3]: https://wiki.archlinux.org/index.php/Bridge_with_netctl
[4]: https://wiki.archlinux.org/index.php/QEMU#Networking
[5]: http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge

--
jlk


pgpgIwYFYrhdG.pgp
Description: PGP signature

Re: [arch-general] tap device

[Jakub Klinkovský]

On 10.03.14 at 23:30, Damjan Georgievski wrote:
> > 3: tap0:  mtu 1500 qdisc
> >
> ...
> 
> > I do not understand why the tap0 profile is listed as DOWN. (# ip link
> > set dev tap0 up does nothing more)
> >
> 
> it's not down. it's UP, only NO-CARRIER. but for a tap device you also need
> a user-space program  to handle it.
> what do you want to accomplish? do you perhaps need a veth device?
> 
> 
> -- 
> damjan

Actually, there was a "state DOWN" in the full command output, which is what
matters.

--
jlk


pgpxsZbWv4JDx.pgp
Description: PGP signature

Re: [arch-general] user management error

[Jakub Klinkovský]

On 17.03.14 at 18:25, message wrote:
> Readers,
> 
> A previously existing /home directory was mounted into the file system
> during the installation process; this directory contained files in a
> directory 'a'.
> 
> A user was created from the root user account:
> 
> useradd -M -p [password] -s /bin/bash [username'a']
> 
> After reboot, the system is restarted as root because the user 'a' is stated
> to not exist. The command 'cat /etc/passwd' reveals a password 'x', but this
> is not the password that was entered.
> 
> How to solve this error?

From passwd(5):
  If the password field is a lower-case “x”, then the encrypted password is
  actually stored in the shadow(5) file instead.

So look into /etc/shadow if you are looking for the password.


pgppdnrFmyNLB.pgp
Description: PGP signature

Re: [arch-general] graphical display management

[Jakub Klinkovský]

On 24.03.14 at 21:08, message wrote:
> On 2014-03-23 18:13, arch-general-requ...@archlinux.org wrote:
> >--
> >
> >Message: 5
> >Date: Thu, 20 Mar 2014 19:06:12 -0400
> >From: Mark Lee 
> >Subject: Re: [arch-general] graphical display management
> >
> >On 03/20/2014 06:50 PM, Guus Snijders wrote:
> >>Op 20 mrt. 2014 18:36 schreef "message"  het
> >>volgende:
> >>>
> >>[ gdm ]
> >>>
> >>>After power-on, the computer
> >>>starts with a sign-in prompt.
> >>>Normal user does not work.
> >>>Signed in as root [...]
> >>
> >>Ok, now we're getting somewhere.
> >>When the logon as user "does not work", do you get an error message?
> >>
> 
> error: 'login incorrect'.
> 
> As root, enter the command 'su a' and not prompted for a password. 'less
> /etc/shadow' shows the password for the user.
> 
> Interestingly, 'su a' results in the cursor 'pwd' to be the root home
> directory and not '/home/a'.
> 

This is the expected behaviour. Just run the command 'cd', without arguments it
will get you into the home directory, which should be '/home/a'. Or run
'su -l a'.

> >
> >Do you have the correct graphics drivers installed (xf86-video-*)? At
> >least xf86-video-vesa should work. See
> >
> >
> 
> Yes, according to the successful initiation of an x session when signed in
> as root and the driver installation test instructions.


pgpKrFbik9G_Z.pgp
Description: PGP signature

Re: [arch-general] browser and tty

[Jakub Klinkovský]

On 25.03.14 at 13:26, Mark Lee wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On 03/25/2014 01:23 PM, Jason Plum wrote:
> > Verify there is no running instance of Chromium in any other session, as it
> > spawns children withing its original session. I have seen this happen with
> > X2go as well.
> > 
> > Jason Plum
> > WarheadsSE
> > 
> > 
> > On Tue, Mar 25, 2014 at 1:18 PM, arnaud gaboury 
> > wrote:
> > 
> >> Dear list,
> >>
> >> I decided to get rid of my mate DE and go i3. Before I am testing my
> >> settings on tty2 (Ctrl+Alt+F2) with a modify .xinitrc (exec i3).
> >>
> >> I have a weird behavior as regarding my web browser, could it be
> >> chromium or firefox.
> >>
> >> On my i3 config. I have this line:
> >>
> >> assign [instance="^chromium$"] → 1
> >>
> >> Unfortunately, when I log in on tty2, there is no chromium being
> >> started. When I am back on tty1 (mate session), I find chromium being
> >> opened.
> >> Then, on tty2, if I start manually firefox, I can't as I am told
> >> "firefox is already running". Indeed it is but on tty1.
> >>
> >> It seems like web browsers are "attached" to my tty1.
> >>
> >> Is there any reason for this behavior? Shall I modify anything to
> >> start any web browser on tty2 ?
> >>
> >> Thank you for help.
> >>
> 
> Salutations,
> 
> According to the Arch Wiki :
> ;
> that seems to be the correct behavior.
> 
> You are assigning chromium to be launched on tty1.
> 
> Regards,
> Mark

i3 workspace is *not* tty! See 
http://i3wm.org/docs/userguide.html#_using_workspaces


pgpouMDJeHwLl.pgp
Description: PGP signature

Re: [arch-general] browser and tty

[Jakub Klinkovský]

On 25.03.14 at 18:18, arnaud gaboury wrote:
> Dear list,
> 
> I decided to get rid of my mate DE and go i3. Before I am testing my
> settings on tty2 (Ctrl+Alt+F2) with a modify .xinitrc (exec i3).
> 
> I have a weird behavior as regarding my web browser, could it be
> chromium or firefox.
> 
> On my i3 config. I have this line:
> 
> assign [instance="^chromium$"] → 1
> 
> Unfortunately, when I log in on tty2, there is no chromium being
> started. When I am back on tty1 (mate session), I find chromium being
> opened.
> Then, on tty2, if I start manually firefox, I can't as I am told
> "firefox is already running". Indeed it is but on tty1.
> 
> It seems like web browsers are "attached" to my tty1.
> 
> Is there any reason for this behavior? Shall I modify anything to
> start any web browser on tty2 ?
> 
> Thank you for help.

AFAIK, systemd does not (yet) support multi-session correctly - but this is
mostly irrelevant, unless you want to use dbus.

Anyway, I don't think this is supported at all - what would be the expected
behaviour when you run the same browser profile on both tty1 and tty2 ?
What would happen when file conflict arises (same profile means both instances
use the same directory for data)?

--
jlk


pgpzXarCzTCid.pgp
Description: PGP signature

Re: [arch-general] browser and tty

[Jakub Klinkovský]

On 25.03.14 at 18:56, arnaud gaboury wrote:
> >
> > i3 workspace is *not* tty! See 
> > http://i3wm.org/docs/userguide.html#_using_workspaces
> 
> No ?? really? Are you joking ?

I'm certain. i3 workspaces are an implementation of "virtual desktop" [1], as
Wikipedia calls it. I'm quite sure that MATE has its own implementation, but it
is likely very different from i3's. On the other hand, ttys are "virtual
consoles" [2], which is similar concept, but on lower level. The general rule is
that one X server cannot span multiple ttys.

[1]: https://en.wikipedia.org/wiki/Virtual_desktop
[2]: https://en.wikipedia.org/wiki/Virtual_console

--
jlk


pgps59foGkbgO.pgp
Description: PGP signature

Re: [arch-general] browser and tty

[Jakub Klinkovský]

On 25.03.14 at 19:02, arnaud gaboury wrote:
> >>>
> >>> According to the Arch Wiki :
> >>> ;
> >>> that seems to be the correct behavior.
> >>>
> >>> You are assigning chromium to be launched on tty1.
> 
> No, I am assigning chromium to be launched on WORKSPACE 1 !!
> 
> > I apologize I just caught the error myself as your email came in. Does
> > i3 require xorg-xserver, and if that's the case, is there already a
> > running instance of the xserver on TTY1(you mention you have mate).
> >
> Even if I boot directly into i3 in tty1, chromium is not started on workspace 
> 1.
> 

The 'assign' directive will not start Chromium, you would need to combine it
with 'exec'. Or have I misunderstood again?

> Furthermore, my keyboard is US, not the one I use.
> Part of my /etc/X11/xorg.conf
> 
> Section "InputDevice"
> Identifier   "Keyboard0"
> Driver"kbd"
> Option "XkbLayout" "ch"
> Option "XkbModel" "pc104"
> Option "XkbVariant" "fr"
> EndSection
> 
> All my issues seem tied to a xserver  issue in fact.

Is it /etc/X11/xorg.conf or some file in /etc/X11/xorg.conf.d/ ? This is a long
shot, but there might be a difference...


pgpti6OspH4A9.pgp
Description: PGP signature

Re: [arch-general] browser and tty

[Jakub Klinkovský]

On 25.03.14 at 19:17, arnaud gaboury wrote:
> On Tue, Mar 25, 2014 at 7:09 PM, Jakub Klinkovský  wrote:
> > On 25.03.14 at 18:56, arnaud gaboury wrote:
> >> >
> >> > i3 workspace is *not* tty! See 
> >> > http://i3wm.org/docs/userguide.html#_using_workspaces
> >>
> >> No ?? really? Are you joking ?
> >
> > I'm certain. i3 workspaces are an implementation of "virtual desktop" [1], 
> > as
> 
> It seems that we don-t have same kind of joke. I know tty is not i3 workspace.
> 

Apologies. On the other hand, my post must have been really funny for you :)

> After a reboot, now I boot directly into i3. Fine, chromium is running .
> But my keyboard is still wrong. Any suggestion

See the other post, and please keep try to keep the problem solving linear (as
in "linear graph"), don't switch branches if possible.


pgp4Rqz5I3MIE.pgp
Description: PGP signature

Re: [arch-general] browser and tty

[Jakub Klinkovský]

On 25.03.14 at 23:35, arnaud gaboury wrote:
> >
> > As for firefox, these two lines starts firefox, BUT in workspace 2, as
> > indicated in the i3 bar.
> >
> > exec firefox-aurora
> > assign [instance="^firefox-aurora$"] 1
> 
> exec --no-startup-id i3-msg 'workspace 1; exec firefox-aurora'  did the trick

Actually, looking at the above lines now, you should first 'assign' and then
'exec', which should be the last thing defined in the config.

--
jlk


pgpkdpfmpM04B.pgp
Description: PGP signature

Re: [arch-general] Printable wiki pages not working

[Jakub Klinkovský]

On 30.03.14 at  0:37, Karol Blazewicz wrote:
> > On Sat, Mar 29, 2014 at 4:23 PM, Jerome Leclanche  wrote:
> > ?printable=yes on the wiki doesn't seem to have any effect.
> 
> https://bugs.archlinux.org/task/30825

Actually, it's because print.css [1] does only one thing: hides the permalink.
I'm puzzled as to what does the "it is working at the moment" in the bug report
mean...

Alternatively, the stylesheet could be configured at [2], but only admins can
edit the MediaWiki namespace. There seems to be a draft [3], but it is placed in
the wrong namespace.

[1]: 
https://projects.archlinux.org/vhosts/wiki.archlinux.org.git/tree/skins/archlinux/print.css
[2]: https://wiki.archlinux.org/index.php/MediaWiki:Print.css
[3]: https://wiki.archlinux.org/index.php/ArchWiki:Print.css

--
jlk


pgpg1r0SMRL4T.pgp
Description: PGP signature

[arch-general] [wiki cleanup] Links to non-existent packages

[Jakub Klinkovský]

Hello all,

as of today, there are exactly 714 invalid uses (413 unique) of Template:AUR [1]
or Template:Pkg [2] on the wiki, spread across 398 pages. The complete list is
on [3].

I will try to go through it and update the links, but this is not a one-man job,
so I would really appreciate some help. Please remember to strike/remove the
items from the list to save others' time.

The list includes some trivial mistakes (e.g. using package name with version),
but in most cases it will involve updating other content of the page. Also it
may be possible that there is a direct replacement for some packages (e.g. the
result of merging/renaming).

[1]: https://wiki.archlinux.org/index.php/Template:AUR
[2]: https://wiki.archlinux.org/index.php/Template:Pkg
[3]: https://wiki.archlinux.org/index.php/User:Lahwaacz.bot/Report_2014-04-05

Regards,

--
jlk


pgpLMIE5pEJoT.pgp
Description: PGP signature

Re: [arch-general] Optimizing boot

[Jakub Klinkovský]

On 30 April 2014 00:06:43 CEST, Toyam Cox  wrote:
>Hello,
>
>I want to have a sub-30 second boot time, so as to make it possible for
>me
>to power down my computer and power back up at a moment's notice. Right
>now, I have a (according to my watch) ~35 second boot time. I used
>systemd-analyze, and discovered that NetworkManager.service is running
>for
>12 seconds of that time! Also, polkit.service runs quite a while after
>everything else, but that is less important.
>
>How do I optimize NetworkManager.service to shorten boot times,
>especially
>as I don't need a network first-thing?
>
>-- 
>- Toyam

Just a wild guess: https://bbs.archlinux.org/viewtopic.php?id=180099

[arch-general] Packaging: difference between "example documentation config" and "default config"

[Jakub Klinkovský]

Hi all,

there are two kinds of config files shipped with Arch packages:
 1) "example documentation config" - by this I mean sample config files,
intended for documentation purposes
 2) "default config" - by this I mean configs containing sensible default values
uncommented to provide basic functionality ootb
One of the recognition signs is that in Arch, 2) configs are usually very short.

Some examples of proper "default configs":
/etc/ntp.conf
/etc/pacman.conf
and of "example documentation configs":
/etc/dnsmasq.conf
/etc/wpa_supplicant/wpa_supplicant.conf
/etc/hostapd/*
/usr/share/doc/lighttpd/config/*

Now the problem is: should "example documentation configs" be installed in /etc/
or /usr/share/doc// ? I'd vote for the latter, here is the reasoning:

1) Users will hardly overwrite files in /usr/share/doc/ so keeping "example
documentation configs" there will ease maintenance of short and much clearer
separate config files.

2) In the examples above, in all dnsmasq, wpa_supplicant and hostapd, the
decision to keep the configs under /etc/ is made in PKGBUILD [1], [2], [3]. In
case of wpa_supplicant, wpa_supplicant.conf(5) even indicates that the path to
example config is "probably" /usr/share/doc/wpa_supplicant/.

3) Keeping "example documentation configs" with uncommented options under /etc/
might lead to unintended behaviour, meaning the default options might not be
very sane. Specifically, /etc/wpa_supplicant/wpa_supplicant.conf has multiple
network blocks uncommented, which, in conjunction with the recently introduced
dhcpcd hook [4], may lead to wpa_supplicant being started without user's
intervention and not failing due to the network blocks uncommented in
wpa_supplicant.conf.

4) Considering the user-centric clause in the Arch Way [5], I don't think any
default config file for the three packages is necessary as anybody using it will
have to modify it. Creating the file instead of modifying some bloated sample
should be easier, see point 1).

Before I submit bug reports for the three packages (dnsmasq, wpa_supplicant,
hostapd), I'd like to hear some more opinions about this. Thanks,

--
jlk

[1]: 
https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/dnsmasq#n37
[2]: 
https://projects.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/wpa_supplicant#n42
[3]: 
https://projects.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/hostapd#n55
[4]: https://wiki.archlinux.org/index.php/Dhcpcd#10-wpa_supplicant
[5]: https://wiki.archlinux.org/index.php/The_Arch_Way#User-centric


pgpgbIfJDehwd.pgp
Description: PGP signature

Re: [arch-general] Qemu - File sharing using Samba

[Jakub Klinkovský]

On 06.07.14 at 16:14, Csányi Pál wrote:
> Hi,
> 
> I'm trying to get access to files on my ArchLinux host from my Qemu
> emulated Windows7 guest.
> 
> I have installed samba on ArchLinux host system; I start it with:
> # systemctl start smbd.service
> 
> I started the guest Windows7 system with:
> 
> $ qemu-system-x86_64 -smb /home/cspal -cpu core2duo -m 1024 -k hu
> -enable-kvm -usbdevice tablet /var/lib/libvirt/images/win7.qcow2
> 
> When in Windows7 guest system, either in Firefox browser or in Windows
> Explorer, I can't connect to \\10.0.2.4
> 
> What am I missing here?
> 
> -- 
> Regards from Pal

QEMU has built-in SMB server, you shouldn't start it on your own for this. See
the wiki for details:
https://wiki.archlinux.org/index.php/QEMU#QEMU.27s_built-in_SMB_server

Also, according to qemu(1), the -smb option is deprecated.

--
jlk


pgpg6m4ttAKDt.pgp
Description: PGP signature

Re: [arch-general] 3.15 kernel breaking X ?

[Jakub Klinkovský]

On 07.07.14 at 11:21, Daniel Petre wrote:
> On 07/07/14 07:25, Achilleas Pipinellis wrote:
> >On 07/06/2014 09:17 PM, Daniel Petre wrote:
> >>Hey there,
> >>i just installed Arch on a x61s thinkpad using xf86-video-intel of
> >>course but it seems Cinnamon starts and gives a black unresponsive
> >>screen while booting and trying on linux-lts works absolutely fine..
> >>Anyone has any idea ? Thanks!
> >
> >Intel you say? Check this bug https://bugs.archlinux.org/task/40899
> >Basically, stick with a 3.14 kernel for the moment.
> >
> 
> Apologies but i do not know how to reinstall the 3.14 kernel, linux is 3.15
> and linux-lts is 3.10..
> Can i get from some repo the 3.14 package?
> Thanks.
> 

https://wiki.archlinux.org/index.php/Downgrading_packages

--
jlk


pgp8pEWcClm89.pgp
Description: PGP signature

Re: [arch-general] Qemu - File sharing using Samba

[Jakub Klinkovský]

On 07.07.14 at 16:40, Csányi Pál wrote:
> Hi Guus,
> 
> 2014-07-06 22:37 GMT+02:00 Guus Snijders :
> > Op 6 jul. 2014 20:08 schreef "Csányi Pál"  het
> > volgende:
> >>
> >> 2014-07-06 16:50 GMT+02:00 Jakub Klinkovský :
> >> > On 06.07.14 at 16:14, Csányi Pál wrote:
> >>
> >> [...]
> >
> >> OK, I red that and now I'm starting my VM with the command:
> >>
> >> qemu-system-x86_64 -net nic -net user,smb=/mnt/windows7 -cpu core2duo
> >> -m 1024 -k hu -enable-kvm -usbdevice tablet
> >> /var/lib/libvirt/images/win7.qcow2
> >>
> >> Still, when I'm trying to acess the \\10.0.2.4\qemu in Windows
> >> explorer, I get nothing. The error message is about that that the
> >> server is not responding, saying something about time..
> >
> > Can you ping that ip adress from Windows?
> 
> I can't ping 10.0.2.4 IP address from Windows.

I don't think ping will ever work for user networking, this should be fine.

> 
> > Second: do you have filesharing enabled in the Windows vm
> > (and instructed the firewall to allow that)?
> 
> I think I have filesharing enabled in the Windows vm
> (and instructed the firewall to allow that)
> 
> because I did setup on Windows vm this by following these steps:
> http://swerdna.dyndns.org/susesambawin7.html
> 

I can't access that url.

> Still, I'm not sure in that that what did I on Windows vm, because:
> 1. the \\10.0.2.4\qemu directory is on the host GNU/Linux system, right,
> 2. the directory I shared on the Windows vm is a directory on that
> Windows vm system
> 
> so these two settings is for different things, right?

That's right, for 1. you're fine with user networking (-net user,smb=...), but
for 2. you will need something better to be able to access the guest system from
the host. See the subsections of QEMU#Networking [1] on the wiki.

[1]: https://wiki.archlinux.org/index.php/QEMU#Networking

> 
> -- 
> Regards from Pal

--
jlk


pgpnq2mgqt9UT.pgp
Description: PGP signature

Re: [arch-general] Can't SSH into Arch VM until login screen is viewed

[Jakub Klinkovský]

On 07.07.14 at  9:59, Ben Booth wrote:
> I have a weird issue I’m trying to figure out with Arch and SystemD, and I 
> wonder if anyone here has run into this issue:
> 
> I’m running ArchLinux as a Xen VM. Every time I reboot the system, I can no 
> longer ping it or access it via SSH. However, if I go into the XenCenter UI 
> and click the “Console” tab to view the VM’s login screen, all of a sudden 
> SSH and ping works again. It’s as if systemd is waiting for the login screen 
> to be viewed before it allows SSH to work. Is this some kind of systemd 
> socket-activated functionality related to the getty service? How can I 
> prevent this so that I can log in via SSH after reboot without having to run 
> the XenCenter UI?
> 
> Thanks,
> Ben Booth

If even the ping does not work, it sounds more like an issue with firewall to
me. I have no idea if xen modifies the firewall, check its state before and
after running xen and compare the differences.

--
jlk


pgpeZ9uZUxjlx.pgp
Description: PGP signature

Re: [arch-general] POWER_SUPPLY_CHARGE_FULL(_DESIGN) semantics

[Jakub Klinkovský]

On 15.08.14 at 12:27, Chrisitan Burkard wrote:
> ...
> Another issue I have is that the POWER_SUPPLY_STATUS shows 'Unknown' on
> AC but 'Discharging' on Battery. Do you have any idea why? My guess is
> that i3 uses this property to show the battery/AC state in i3status and
> because of the 'Unkown' value I don't get updates on the state there.

The values for POWER_SUPPLY_STATUS on my laptop are:
  - when running on battery, it is always 'Discharging'
  - when running on AC:
  - 'Full' for 100%
  - 'Unknown' for 95%-99%
  - 'Charging' for <95%
Note that my battery is not getting charged if the level is between 95% and 99%
when I plug in AC.

--
jlk


pgpAJ07ZhvDkC.pgp
Description: PGP signature

Re: [arch-general] Btrfs blues - lack of space

[Jakub Klinkovský]

On 30.08.14 at 23:09, Savyasachee Jha wrote:
> Hello, all
> 
> The contents of my /etc/fstab are as follows:
> 
> /dev/sda3   / btrfs
> rw,relatime,space_cache,autodefrag0 0
> /dev/sda1   /boot ext2  rw,relatime0 2
> /dev/sda5   /home   btrfs
> rw,relatime,space_cache,autodefrag0 0
> 
> Whenever I start my laptop up, /home takes ~17-19 seconds to mount, as is
> evidenced by this line in the output of systemd-analyze blame:
> 
> 16.467s home.mount
> 
> Running df -h on my system, I get:
> 
> Filesystem   TotalUsed   Free   Use% Mounted on
> /dev/sda5 422G   364G   53G   88%/home
> 
> However, running du -h --summarize /home, I get:
> 
> 318G /home
> 
> If I use xdiskusage to see the partition, it shows 46.48G as
> /home/(permission denied). I tried doing this using sudo, and I still have
> the same problem. I have neither subvolumes nor any snapshots on this
> volume.
> 
> Is there any way of recovering this space?
> 
> Thank you,
> Savya
> 
> --
> Savyasachee Jha
> 
> *"Aerodynamics is for people whodon't know how to build engines."*

Use:
$ btrfs filesystem df /home


pgpmv7RArezMG.pgp
Description: PGP signature

Re: [arch-general] Btrfs blues - lack of space

[Jakub Klinkovský]

On 30.08.14 at 21:58, Temlin Olivér wrote:
> > Whenever I start my laptop up, /home takes ~17-19 seconds to mount
> You can always use x-systemd.automount in fstab, which delays the mount to
> the first access (ie. non-root login), or mask home.mount to be
> non-blocking (oneshot), so it runs parallel with the login manager and
> password input.
> Slow mount times are usually caused by large log trees and fragmented
> metadata. Try the autodefrag mount option and btrfs fi defrag -clzo -t 2M
> -r /home (defragment files over 2M in size, recompress with lzo,
> recursively), btrfs balance start /home (and wait for btrfs-endio-wri to
> calm down or check with balance status, this takes some time)
> If those don't help enough, try checking (but not repairing) the device
> with btrfsck, and, if it's clean, clear the logs with btrfs-zero-image
> after backing up the metadata with btrfs-image (consult the btrfs mailing
> list or IRC first, I am not an expert in this).
> 
> > Running df -h on my system, I get:
> > /dev/sda5 422G   364G   53G   88%/home
> Please use btrfs filesystem df (fi df for short), as it will show you both
> the data and metadata allocation with better reflection on actual free data
> space.
> 
> Point is, the allocation on B* trees can only be measured by a full tree
> traversal (as your du try shows the true data usage, but misses
> fragmentation), but btrfs usage is even more complicated. Authors suggest
> that a device never be filled over 75% to avoid metadata fragmentation, but
> by having larger files this can truly be about 95%.
> 
> Sorry for the long text, but I belive this helps in better understanding.
> 
> --Oliver Temlin

Also note that `du` does not account for Copy-on-Write, so it could actually
show higher value than what `btrfs fi df` reports.


pgpFpqWrocpot.pgp
Description: PGP signature

Re: [arch-general] (no subject)

[Jakub Klinkovský]

On 07.09.14 at 12:37, Eugenio M. Vigo wrote:
> 2014-09-07 12:28 GMT+02:00 Ralf Mardorf :
> > The package likely moved from AUR to an official repository and for some
> > reason another version is used.
> >
> > grep kdeedu-kig /var/log/pacman.log
> >
> > and assumed you used yaourt, there likely would be a line
> >
> > [date] [PACMAN] Running 'pacman --color auto -U --asdeps /tmp/yaourt-tmp-*
> >
> > Or you build a package on your own, before there was a version available
> > by an Arch repository and you don't remember that you did it. Yu build
> > something from git and the repository uses the official release from
> > upstream.
> >
> > Usually the difference isn't a release version, as it is in your case,
> > but just a "-2" vs "-1" package version of the same release.
> 
> That package was never installed from AUR. This is the output from
> grep kdeedu-kig /var/log/pacman.log:
> 
> [ugi@UGI ~]$ grep kdeedu-kig /var/log/pacman.log
> [2014-03-14 21:21] [PACMAN] installed kdeedu-kig (4.12.3-1)
> [2014-04-01 12:01] [PACMAN] upgraded kdeedu-kig (4.12.3-1 -> 4.12.4-1)
> [2014-04-19 10:31] [PACMAN] upgraded kdeedu-kig (4.12.4-1 -> 4.13.0-1)
> [2014-05-20 10:17] [PACMAN] upgraded kdeedu-kig (4.13.0-1 -> 4.13.1-1)
> [2014-06-11 14:53] [PACMAN] upgraded kdeedu-kig (4.13.1-1 -> 4.13.2-1)
> [2014-07-23 01:57] [PACMAN] upgraded kdeedu-kig (4.13.2-1 -> 4.13.3-1)
> [2014-08-21 11:17] [PACMAN] upgraded kdeedu-kig (4.13.3-1 -> 4.14.0-1)
> 
> I thought it could be a mirror thing, but I see that at the Database
> (https://www.archlinux.org/packages/extra/x86_64/kdeedu-kig/) the
> package is said to be at version 4.13.3-2 (and this change does not
> show up on the git commits).
> 
> Eu.

On the page you just linked, the Build Date is 2014-08-13 07:45 UTC, while the
Last Updated date is 2014-09-07 08:32 UTC. The git log [1] shows the bump to
4.14, but not (yet?) back to 4.13 so there is definitely something going on...

[1]: 
https://projects.archlinux.org/svntogit/packages.git/log/trunk?h=packages/kdeedu-kig

--
jlk


pgpcF3w3WCUZt.pgp
Description: PGP signature

Re: [arch-general] Check for update in script

[Jakub Klinkovský]

On 11.09.14 at 19:01, Yamakaky wrote:
> Hi
> 
> I can't find a good way to check for available upgrades without touching the
> database, as running `pacman -Sy` without `u` isn't supported. Any idea ?
> Maybe a new pacman switch like "--upstreamdbpath" to toggle change the
> location of sync/ without touching local/ ?
> 
> Why I need it :
> https://github.com/XavierBerger/RPi-Monitor/pull/57#issuecomment-55248969
> 
> Yamakaky

pacman provides a `checkupdates` script, see /usr/bin/checkupdates for how it
works.

--
jlk


pgpmDUdmL4ExP.pgp
Description: PGP signature

Re: [arch-general] Location of the pacman database

[Jakub Klinkovský]

On 15.09.14 at 16:42, Leonid Isaev wrote:
> > In the general case 'pristine' is probably the settings shipped by the
> > various arch linux packages.
> 
> But those do not usually provide sane defaults, e.g. smartd.conf, 
> dnsmasq.conf,
> syslog-ng.conf, wpa_supplicant.conf, and must be edited anyway.
> 

There is a difference between "example documentation config" and "default
config", see one of my previous posts:
https://mailman.archlinux.org/pipermail/arch-general/2014-May/036386.html


pgp59Gn9Lqhjr.pgp
Description: PGP signature

Re: [arch-general] fdisk vs. gdisk for GPT partitioning

[Jakub Klinkovský]

On 16.12.14 at 20:15, Bardur Arantsson wrote:
> On 2014-12-16 19:58, Sebastiaan Lokhorst wrote:
> > Hello everyone,
> > 
> > Since more than a year now, fdisk (provided by util-linux) has had GPT
> > support. This theoretically makes gdisk a duplicate of fdisk, and we could
> > replace gdisk with fdisk.
> > 
> > Now, I'm not asking to drop gdisk or anything like that, but in an effort
> > to clean up the Beginners' guide of the Arch Wiki, we want to use a single
> > partitioning tool for both MBR and GPT partitioning instructions.[1]
> > util-linux fdisk is able to provide this functionality, but we are not
> > completely sure if it is stable by now (it should be, I think).
> 
> Speaking from complete ignorance... do significant numbers of people
> still use MBR for non-obsolete platforms/machines?

The Beginners' guide still applies to people with "obsolete" hardware...

--
jlk


pgpeLGPk1ybJ9.pgp
Description: PGP signature

[arch-general] Christmas wiki cleanup

[Jakub Klinkovský]

Hello all,

after several months there is another round of cleanup action on the wiki. The
subject is, as it was the last time, updating links to packages in official
repositories or in the AUR, which got broken due to package merges, renames or
removals. A bot has done part of the work, but there are still many broken
links requiring intervention of humans.

Everybody is hereby invited to join our cleanup party, because the more people
involved, the sooner the work is finished :)

The party will be held at [1], which is a generated list of broken links, split
into sections by language and page where it occurred. Basically, after the link
is fixed on the relevant page, it should be stricken in the list, in order to
not waste time of others going through the list. More detailed instructions are
given at the top of the list.

See you at the party!

[1]: https://wiki.archlinux.org/index.php/User:Lahwaacz.bot/Report_2014-12-24

--
Jakub Klinkovský (Lahwaacz)


pgpLYeWaxOdhP.pgp
Description: PGP signature

Re: [arch-general] Christmas wiki cleanup

[Jakub Klinkovský]

On 26.12.14 at 15:43, mrlemux wrote:
> The scan for the German wiki is missing

That's because the German wiki is an "external wiki", running on different
domain and server, and thus completely separated from the main ArchWiki. Many
languages have pages on ArchWiki, but others are separated similarly to the
German wiki. See [1] for details.

[1]: https://wiki.archlinux.org/index.php/Help:I18n#Languages

--
Jakub Klinkovský (Lahwaacz)


pgp6xUiZKjoZE.pgp
Description: PGP signature

[arch-general] PKGBUILD: replaces array in split packages

[Jakub Klinkovský]

Hello,

I'm writing a script [1] to update package links on ArchWiki. The script
also gives hints on broken/outdated package, e.g. for 'mesa-dri` the hint is
"replaced by 'mesa'" (with an appropriate link to the 'mesa' package). I've
chosen to only look into the 'replaces' array of the packages, because unlike
'provides', a package can be replaced only by one other package, whereas
multiple packages can "provide" the same package.

Or at least I thought so - it appears that both qemu and libcacard have qemu-kvm
in their 'replaces' array. In this case, it's because qemu is a split package
(qemu + libcacard) and the replaces array is defined globally in the PKGBUILD,
not per-package.

Is this a bug or was my assumption about the 'replaces' array wrong? How would
pacman handle the situation where qemu-kvm is supposed to be replaced by
libcacard and/or qemu?

Thanks for answers,
Jakub Klinkovský (Lahwaacz)

[1]: 
https://github.com/lahwaacz/wiki-scripts/blob/master/update-package-templates.py


pgp_pibFI6btH.pgp
Description: PGP signature

Re: [arch-general] PKGBUILD: replaces array in split packages

[Jakub Klinkovský]

On 13.02.15 at 19:40, Troy Engel wrote:
> On Fri, Feb 13, 2015 at 5:21 PM, Jakub Klinkovský  wrote:
> >
> > Or at least I thought so - it appears that both qemu and libcacard have 
> > qemu-kvm
> > in their 'replaces' array. In this case, it's because qemu is a split 
> > package
> > (qemu + libcacard) and the replaces array is defined globally in the 
> > PKGBUILD,
> > not per-package.
> 
> I am not familiar with qemu, however it appears to be a packaging bug
> in qemu. The qemu package does not depend on libcacard, and libcacard
> does not depend on qemu; based on the readme[1] it sure looks like
> this just happens to be another library developed by the same team
> which can be used with qemu for added features.
> 
> Looking at the qemu PKGBUILD, it seems like that replaces('qemu-kvm')
> belongs in package_qemu() and not in the global definition. The
> replaces() was added in the commit going from 1.2.x to 1.3.x when the
> package was not split:
> 
>   
> https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/qemu&id=273924889b2563215778521747e0f0eb2e98c038
> 
> Then, the package was split going from 1.5.1 to 1.5.2 here:
> 
>   
> https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/qemu&id=3758dddfe4a14cbd6cb5b6ed6ccd0640d169046c
> 
> I am thinking the replaces() array was missed when the split was
> created and is a bug that you should report.

Thanks, I've reported the bug for qemu: https://bugs.archlinux.org/task/43814
As a side note, qemu in fact depends on libcacard, but libcacard alone does not
replace qemu-kvm.

I've also tested what pacman would do in this situation with a dummy package,
and it prompts for all packages replacing qemu-kvm:

:: Starting full system upgrade...
:: Replace qemu-kvm with extra/libcacard? [Y/n] 
:: Replace qemu-kvm with extra/qemu? [Y/n] 

Answering Yes and then No would lead to only libcacard being installed.

So I guess it is theoretically possible to have multiple packages replacing the
same package, but these situations are probably unwanted.

--
Jakub Klinkovský (Lahwaacz)


pgp0p0kVHKQK4.pgp
Description: PGP signature

[arch-general] QEMU and the spicec client

[Jakub Klinkovský]

The QEMU page on the wiki [1] has a section on the "spice" support in the qemu
package [2], which also mentions the "spicec" client program. As far as I
remember, it has been part of the qemu package, but now it seems to be gone and
even pkgfile can't find it. Does anybody know what happened?

[1] https://wiki.archlinux.org/index.php/QEMU#Spice_support
[2] https://www.archlinux.org/packages/extra/x86_64/qemu/

-- 
jlk


signature.asc
Description: PGP signature

Re: [arch-general] QEMU and the spicec client

[Jakub Klinkovský]

On 03.12.15 at 21:53, Al Kenn wrote:
> On Thu, Dec 03, 2015 at 11:24:33AM +0100, Jakub Klinkovský wrote:
> > The QEMU page on the wiki [1] has a section on the "spice" support in the 
> > qemu
> > package [2], which also mentions the "spicec" client program. As far as I
> > remember, it has been part of the qemu package, but now it seems to be gone 
> > and
> > even pkgfile can't find it. Does anybody know what happened?
> 
> package: spice-gtk3
> command: spicy
> 
> as recommended by http://www.spice-space.org/download.html
> 

I'm aware of the GTK-3 client, but is "spicec" really gone and why?

-- 
jlk


signature.asc
Description: PGP signature

Re: [arch-general] QEMU and the spicec client

[Jakub Klinkovský]

On 03.12.15 at 17:42, Jakub Klinkovský wrote:
> On 03.12.15 at 21:53, Al Kenn wrote:
> > On Thu, Dec 03, 2015 at 11:24:33AM +0100, Jakub Klinkovský wrote:
> > > The QEMU page on the wiki [1] has a section on the "spice" support in the 
> > > qemu
> > > package [2], which also mentions the "spicec" client program. As far as I
> > > remember, it has been part of the qemu package, but now it seems to be 
> > > gone and
> > > even pkgfile can't find it. Does anybody know what happened?
> > 
> > package: spice-gtk3
> > command: spicy
> > 
> > as recommended by http://www.spice-space.org/download.html
> > 
> 
> I'm aware of the GTK-3 client, but is "spicec" really gone and why?
> 
> -- 
> jlk

Oh well, I seem to have found it:
http://cgit.freedesktop.org/spice/spice/tree/NEWS?id=f0aeb9db000a34a46b51c5d95229171ff1eee307#n3

-- 
jlk


signature.asc
Description: PGP signature

Re: [arch-general] iptables script

[Jakub Klinkovský]

On 10.09.13 at 13:27, F. Gr. wrote:
> I'm newbie about iptables. I use this script
> <http://pastebin.ca/2447430> for my system. It is based on
> <http://wiki.archlinux.org/index.php/Simple_stateful_firewall>. Now I
> want to add an iptables log chain and others. What is the correct
> line to start adding the following?
> 
> 
> ## Logging
> $IPT -N LOGDROP
> $IPT -A LOGDROP -m limit --limit 5/m --limit-burst 8 -j LOG --log-prefix 
> "IPTables-Dropped: "
> $IPT -A LOGDROP -j DROP
The position of these lines in script does not matter much, place it anywhere
below line 27.

> 
> # log and drop packets that hit this rule
> $IPT -A INPUT -m conntrack --ctstate INVALID -j LOGDROP
This should replace '$IPT -A INPUT -m conntrack --ctstate INVALID -j DROP' (line
47 in the script)

> 
> 
> Supposing I want to add the following lines as well, is there any
> rules that is superfluous? These rules have to place after or before
> the rule "$IPT -A INPUT -m conntrack --ctstate INVALID -j DROP"?
> 
> 
> # SSH bruteforce attacks
> $IPT -N IN_SSH
For consistency, place it below the definition on other chains, line 32.

> $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH
The ssh connections should be handled before it falls into TCP chain, so place
this rule before '$IPT -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP'
(line 50).

> $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 3 --seconds 
> 10 -j DROP
> $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 4 --seconds 
> 1800 -j DROP
> $IPT -A IN_SSH -m recent --name sshbf --set -j ACCEPT
Same as the LOGDROP chain (see above), anywhere below line 27.

> $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH
You don't have to duplicate the rules.

> 
> ## Local Area Network Denial (LAND) attack
> # Block all packets from your own IP
> $IPT -A INPUT -s 192.168.201.2/32 -j DROP
> # Block any packet from local network
> $IPT -A INPUT -s 127.0.0.0/8 -j DROP
> 
> # SYN Flood
> $IPT -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT
> 
> # SYN packets
> # Drop any tcp packet that does not start a connection with a syn flag
> $IPT -A INPUT -p tcp ! --syn -m conntrack --ctstate NEW -j DROP
> 
> # NULL packets
> $IPT -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
> 
> # XMAS packets
> $IPT -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
> 
> # Fragments Packet
> $IPT -A INPUT -f -j DROP
> 
> # ping of death
> $IPT -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j 
> ACCEPT
> 
> # Furtive port scanner
> $IPT -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s 
> -j ACCEPT
> 
I'm not sure about the rest, I think it should go before any rule in INPUT chain
with target ACCEPT (in the script that is
'$IPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT' on line 43,
icmp echo-request (line 41) does not count - it is already handled). The Simple
Stateful Firewall article on ArchWiki states that "Dropping all traffic and
specifying what is allowed is the best way to make a secure firewall.", so at
least some of these rules might be superfluous.

> 
> 

I don't know how you use the script, but you might consider using the
'iptables-restore' command to switch between multiple iptables configurations.
If you still want to use the iptables.service, you can make the file
/etc/iptables/iptables.rules a symlink and change its target to change the
configuration.
You can run 'iptables-save > foo.rules' to save current iptables configuration,
edit the file to your liking (adding comments etc.), and finally run
'iptables-restore < foo.rules' to load the saved configuration.

Regards,
Jakub Klinkovský (Lahwaacz)


pgpPO6_mnLKRo.pgp
Description: PGP signature

[arch-general] Various questions regarding keyboard configuration

[Jakub Klinkovský]

Hi,

I'm currently rewriting some pages on ArchWiki regarding keyboard configuration,
the current state is quite a mess. Here's the most relevant discussion:
https://wiki.archlinux.org/index.php/Talk:Xorg#Keyboard_settings
You can watch the progress on my user-pages, any feedback is welcome:
https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_in_Xorg
https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_in_console

I've got some questions that I think should be answered before I finish:

1) Why are keycodes as reported by xev different from those reported by showkey?
This is not related to configuration, but I plan to update/rewrite
https://wiki.archlinux.org/index.php/Extra_Keyboard_Keys too.

2) The man page vconsole.conf(5) mentions KEYMAP_TOGGLE variable to "configure a
second toggle keymap", however, that's all the documentation says. Looking at
the code (vconsole-setup.c at line 120), it uses the 'loadkeys' utility, which
does not document any such feature. Instead it seems that the specified keymaps
are loaded serially, resulting in KEYMAP_TOGGLE overwrites KEYMAP. Am I missing
something here?

Regards,
Jakub Klinkovský (Lahwaacz)


pgplXKPeSFgLK.pgp
Description: PGP signature

Re: [arch-general] arch install issues with 2013.09 iso & vfat device

[Jakub Klinkovský]

On 17.09.13 at  0:06, arnaud gaboury wrote:
> Dear all,
> 
> this is my second arch install this month (archlinux-2013.09.01-dual.iso)
> on an usb key to get a live Arch. Both installs failed on a vfat formated
> device, when they succed on ext2.
> $ pacstrap /mnt base returns lot of these erros:
> warning: warning given when extracting usr/bin/vgrename (Can't create
> '/mnt/usr/bin/vgrename')
> ..
> 
> It seems, even in chroot, that I can't write the vfat formated device
> 
> I would like to use vfat as these keys are aimed to boot Arch from windows
> machines and share files.
> I used gdisk and fdisk to partition, then mkfs.vfat to format, on clean usb
> keys.
> Is there anything I missed ?
> 
> Then, there is an issue with package vi:
> error: could not open file
> /mnt/var/cache/pacman/pkg/vi-1:050325-3-x86_64.pkg.tar.xz.part: Invalid
> argument
> I first # pacman-key --init && pacman-key --populate archlinux
> and # pacman -Syy
> 
> The only way to succed the install was :
> # pacstrap -i /mnt base --ignore vi
> 
> I must add that earlier installs with earlier iso did not show this issue.
> Maybe shall I open a bug report, or is this a known issue ?
> 
> Last, the above command returns :
> :: vi is in IgnorePkg/IgnoreGroup. Install anyway? [Y/n]
> 
> It seems weird to me that default is Yes, as I specified --ignore vi.
> Would' nt it makes more sense to default No ?
> 
> Regards.

vfat has a lot of reserved characters:
https://en.wikipedia.org/wiki/Filename#Comparison_of_filename_limitations

Note the colon (':') in "vi-1:050325-3-x86_64.pkg.tar.xz.part", don't know why
it couldn't write "/mnt/usr/bin/vgrename".

Regards,
Jakub Klinkovský (Lahwaacz)


pgpcgZvTj7b7k.pgp
Description: PGP signature

Re: [arch-general] xdm and awesomewm incompatibilty

[Jakub Klinkovský]

On 28.09.13 at 20:12, Szymon Szydełko wrote:
> On Sat, Sep 28, 2013 at 6:40 PM, ashwin  wrote:
> 
> >  What i am looking for is just the
> > login manager and its dependecies and not the entire DE. I assume kdm
> > does the same thing.
> >
> 
> 
> If you can cope with  GTK+3 being pulled, try LightDM
> 
> https://wiki.archlinux.org/index.php/Lightdm
> 
> Szymon Szydełko

You don't need gtk3 to use lightdm, it depends on the "greeter":
https://www.archlinux.org/packages/community/x86_64/lightdm-gtk2-greeter/


pgpshx1ZU590B.pgp
Description: PGP signature

Re: [arch-general] mplayer2 deprecation

[Jakub Klinkovský]

On 31.10.13 at  4:55, coffeekin...@gmail.com wrote:
> On Thu, Oct 31, 2013 at 05:03:53PM +0800, Rashif Ray Rahman wrote:
> > On 31 October 2013 06:38, kendell clark  wrote:
> > > Since mplayer2 has been deprecated and moved to the aur, i've been trying 
> > > to
> > > find another console video player that will play videos in full screen.
> > 
> > Fullscreen in console requires a trick, AFAIK. In fact, the 'fs'
> > option has no major function; 'zoom' does the work, though I may be
> > wrong. Append the following options:
> > 
> > -vo fbdev2 == Standard fbdev may not work.
> > -zoom -xy WIDTH == Here WIDTH is your maximum horizontal screen resolution.
> > -quiet == To suppress the info bar at bottom while maximized.
> > -fs == To suppress background output while maximized.
> > 
> > Here's what I use for my 1366x768 screen:
> > 
> > alias climplayerfs='mplayer -quiet -softvol -fs -zoom -xy 1366 -vo
> > fbdev2 -ao alsa -af volnorm'
> > 
> > 
> > --
> > GPG/PGP ID: C0711BF1
> 
> hi
> Thanks for the help. That worked better than my attempts did, although now 
> when I start mplayer with the alias I get the following:
> [fbdev2] Screensize is smaller than video size (1600x900 < 1600x1200)
> FATAL: Cannot initialize video driver.
> I used to run into these issues all the time. Am I missing anything, or is it 
> just not possible to watch videos in console with mplayer?
> Thanks
> Kendell clark
> 

I have this little script which tries to preserve the aspect ratio, maybe it
will work better for you:
https://github.com/lahwaacz/archlinux-dotfiles/blob/master/Scripts/mplayer-console


pgpvb_MifhY5X.pgp
Description: PGP signature

Re: [arch-general] dpms in text mode worked 1st boot, now monitor blanks but won't power off

[Jakub Klinkovský]

On 03.12.13 at  8:18, David C. Rankin wrote:
> Guys,
> 
>   On my 1st boot after install of a new Arch box, the monitor would go to 
> sleep
> in text mode. (monitor power light goes to yellow indicating sleep and screen
> goes black (off), not just blank) I thought that was a great trick, since
> normally, the screen just blanks, but the monitor doesn't really go to sleep
> (monitor power indicator on). Mouse movement (gpm) or key stroke would wake 
> the
> monitor up as expected. After configuring the box (nothing related to display)
> on the next boot, the screen will blank, but not go to sleep (monitor power
> light remains on and screen goes blank, but not black (off))
> 
>   I can't figure out what I could have done to alter anything related to the
> display. (configuration was to mysql, httpd, named, dhcpd, samba, etc)
> 
>   What controls whether display powers off in text mode and what can I check 
> for
> in journalctl to help figure this out?
> 
> -- 
> David C. Rankin, J.D.,P.E.

I use 'consoleblank=' kernel parameter to set the delay. See also
ArchWiki page:
https://wiki.archlinux.org/index.php/Display_Power_Management_Signaling#DPMS_interaction_in_a_Linux_console_with_setterm

---
Jakub Klinkovský (Lahwaacz)


pgpHG3khvwKAs.pgp
Description: PGP signature

Re: [arch-general] Fwd: Notebook freeze and slow when copy big files to external usb

[Jakub Klinkovský]

On 04.12.13 at 12:08, Maykel Franco wrote:
> Hi, I when I make a copy of a large file to a 2GB or 8GB usb 3.0
> external hard drive, I notice that arch remains slow, frozen ... He
> struggles to open windows are minimized. I have the kernel:
> 
> 3.12.2-1-ARCH
> 
> Update the whole system to the last. Can you think because it can be?
> 
> I also went from the 3.11 kernel
> 
> However, debian, ubuntu, opensuse me not pass this ...
> 
> It's happened to someone else?
> 
> Thanks for everything.

See ArchWiki:
https://wiki.archlinux.org/index.php/Maximizing_Performance#Tuning_kernel_parameters

Even USB 3 is slow compared to RAM...

See also this article on LWN for more information:
http://lwn.net/Articles/572911/


pgpYH19MmmQU2.pgp
Description: PGP signature

[arch-general] ArchWiki: bad rendering on Android devices

[Jakub Klinkovský]

Hi,

I've noticed some pretty bad rendering of ArchWiki on my Nexus 7 - see the
screenshots in [1].

The text seems to be indented from the right side (the width is approximately
the same as the floating box for "Related articles", but the problem is not
limited to pages with the floating box), while the boxed messages (notes, tips,
warnings, code blocks...) are rendered correctly - well, almost correctly,
sometimes even the text in boxes is indented (see the warning on one of the
screenshots).

At first I thought that it's just my browser, but then I saw the same behaviour
on other devices, different browsers etc., so this is either bug in webkit or
ArchWiki. Changing the user-agent string also does not help.

Can more people confirm this? Is there something that can be done on ArchWiki?

[1]: https://www.dropbox.com/sh/qxkdl3k7u97ljki/xvw-gFusBd

--
Jakub Klinkovský (Lahwaacz)


pgpqpDowigHhN.pgp
Description: PGP signature

Re: [arch-general] ArchWiki: bad rendering on Android devices

[Jakub Klinkovský]

On 06.12.13 at 16:53, Lukas Jirkovsky wrote:
> On Fri, Dec 6, 2013 at 4:39 PM, Jakub Klinkovský  wrote:
> > Hi,
> >
> > I've noticed some pretty bad rendering of ArchWiki on my Nexus 7 - see the
> > screenshots in [1].
> 
> The indentation is fine on Firefox for Android, but it has a different
> problem – the menu uses too large font, so almost every menu entry
> spans over several lines.
> 
> Lukas

Even on wikipedia.org the text is indented from right side (when requested the
desktop version). This is pretty annoying because most wikis don't have a mobile
version. Plus on tablets the mobile version does not make sense anyway.

This sounds like an issue with webkit then, so it boils down to whether it's
easier to fix webkit or provide a workaround for MediaWiki...

--
Jakub Klinkovský (Lahwaacz)


pgpdLUiCACgVy.pgp
Description: PGP signature

Re: [arch-general] ArchWiki: bad rendering on Android devices

[Jakub Klinkovský]

On 11.12.13 at  7:25, Eduardo Machado wrote:
> Em 07/12/2013 17:15, "Jakub Klinkovský"  escreveu:
> >
> > On 06.12.13 at 16:53, Lukas Jirkovsky wrote:
> > > On Fri, Dec 6, 2013 at 4:39 PM, Jakub Klinkovský  wrote:
> > > > Hi,
> > > >
> > > > I've noticed some pretty bad rendering of ArchWiki on my Nexus 7 -
> see the
> > > > screenshots in [1].
> > >
> > > The indentation is fine on Firefox for Android, but it has a different
> > > problem – the menu uses too large font, so almost every menu entry
> > > spans over several lines.
> > >
> > > Lukas
> >
> > Even on wikipedia.org the text is indented from right side (when
> requested the
> > desktop version). This is pretty annoying because most wikis don't have a
> mobile
> > version. Plus on tablets the mobile version does not make sense anyway.
> >
> > This sounds like an issue with webkit then, so it boils down to whether
> it's
> > easier to fix webkit or provide a workaround for MediaWiki...
> >
> > --
> > Jakub Klinkovský (Lahwaacz)
> 
> There is an Arch Wiki app at play.google.com that shows everything in
> suitable way.
> 
> Note: i am not the mantainer of this app.

Thanks for the tip, I did not know about this app. I'll add a link, just for the
record: https://play.google.com/store/apps/details?id=com.jtmcn.archwiki.viewer

However, as an ArchWiki maintainer, I need the page rendered exactly the same as
it would be on a desktop. According to the screenshots, this app uses some
custom mobile layout optimized for small screens. Also note that mobile versions
of websites generally are mostly useless on a tablet with a (relatively) large
screen.

Jakub Klinkovský (Lahwaacz)


pgpPhgae62ibk.pgp
Description: PGP signature